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(57) ABSTRACT 

An apparatus and method for switching redundancy control 
which provides fast switching from a malfunctioning com- 
ponent to a redundant component with minimum data flow 
interruption for both transmitted and received data. The 
redundancy control system having an APS (Automatic 
Switching Protection) Hub, at least a working and a redun- 
dant tributary card, a bridge to provide identical traffic to the 
working and redundant tributary cards, a working and a 
redundant STM switching fabric, selectors within the work- 
ing and redundant STM switching fabrics for selecting the 
traffic from the working tributary card to further process, a 
working and a redundant ATM switching fabric, a working 
and a redundant ATM processor and ATM selectors for 
selecting traffic needing cell switching from the working 
STM switching fabric to process further. The system is 
capable of monitoring itself to detect failures and the APS 
Hub is outfitted so as to become aware of detected failures 
and initiate a switch in the appropriate selectors or ATM 
selectors so as to change the traffic being further processed 
from the failed working component to the redundant com- 
ponent. 

50 Claims, 4 Drawing Sheets 
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SWITCHING REDUNDANCY CONTROL 

The present invention relates generally to a switching 
redundancy control method and system for providing fast 
switching from a malfunctioning working component to a 5 
redundant component with minimum data flow interruption 
for both transmitted and received data. 

BACKGROUND OF THE INVENTION 

Telecommunication service providers today face an ever jo 
increasing amount competition. Competitive local exchange 
carriers and traditional long distance carriers are entering the 
local telecommunications services market, while the 
Regional Bell Operating Companies are attempting to enter 
the long distance telecommunications services market. This 15 
dramatic increase in competition makes it imperative that 
the quality of service provided by a telecommunication . 
service provider be extremely high. If telecommunications 
customers finds their service interrupted, it is very easy for 
them to switch to another service provider. 20 

Although the quality of manufacture of telecommunica- 
tions equipment is increasing, along with better manufac- 
turing techniques and materials technologies, failures still to 
do occur on components within telecommunications sys- 
tems. Because of the increased competition in the service 25 
provider market, it is very important that the service inter- 
ruptions caused by failures are minimized in terms of data 
loss or delay. Providing redundancy within telecommunica- 
tions equipment is one way to address these concerns. 

Redundancy within telecommunications equipment has 30 
been provided in the past. However, typically the redun- 
dancy control systems are complex and/or are not quick 
enough to switch between a working component with a 
failure and a redundant component for today's heavy data 
traffic loads and high data rates. 35 

Thus, a need has arisen for a non-complex, yet quick, 
switching redundancy control method and apparatus. 

SUMMARY OF THE INVENTION 

The present invention provides an apparatus and method 40 
for switching redundancy control which provides fast 
switching from a malfunctioning component to a redundant 
component with minimum data flow interruption for both 
transmitted and received data. The invention does so by 
providing an APS (Automatic Switching Protection) Hub, at 45 
least a working and a redundant tributary card, a bridge to 
provide identical traffic to the working and redundant tribu- 
tary cards, a working and a redundant STM switching fabric, 
selectors within the working and redundant STM switching 
fabrics for selecting the traffic from the working tributary 50 
card to further process, a working and a redundant ATM 
switching fabric, a working and a redundant ATM processor 
and ATM selectors for selecting traffic needing cell switch- 
ing from the working STM switching fabric to process 
further. Other data switching fabrics and processors, such as 55 
frame relay, could also be used instead of, or in addition to, 
ATM. The system is capable of monitoring itself to detect 
failures and the APS Hub is outfitted so as to become aware 
of detected failures and initiate a switch in the appropriate 
selectors or ATM selectors so as to change the traffic being 60 
further processed from the failed working component to the 
redundant component. 

Thus, it is an object of the present invention to provide a 
non-complex system and method for fast switching between 
working and redundant components in a telecom munica- 65 
tions network element when a fault occurs on the working 
component. 



,858 Bl 

2 

It is a further object of the present invention to provide for 
the fast switching between a working and redundant tribu- 
tary card when the working card is experiencing faults so as 
to minimize traffic loss. 

It is a further object of the present invention to provide for 
the fast switching between a working and redundant STS 
switching fabric when the working fabric is experiencing 
faults so as to minimize traffic loss. 

It is a further object of the present invention to provide for 
the fast switching between a working and redundant VT 
switching fabric when the working fabric is experiencing 
faults so as to minimize traffic loss. 

It is a further object of the present invention to provide for 
the fast switching between a working and redundant ATM 
processor card when the working card is experiencing faults 
so as to minimize traffic loss. 

It is a further object of the present invention to provide for 
the fast switching between a working and redundant ATM 
switching fabric when the working fabric is experiencing 
faults so as to minimize traffic loss. 

BRIEF DESCRIPTION OF THE DRAWINGS 

These and other objects and advantages of the present 
invention will become apparent and more readily appreci- 
ated by reference to the description of the preferred 
embodiments, taken in conjunction with a the accompanying 
drawings, of which: 

FIG. 1 is a block diagram of a network element according 
to an embodiment of the present invention; 

FIG. 2 is a block diagram of a redundancy control system 
according to an embodiment of the present invention; 

FIG. 3 is a flow chart of a redundancy control method for 
tributary cards according to an embodiment of the present 
invention; 

FIG. 4 is a flow chart of a redundancy control method for 
switching fabrics according to another embodiment of the 
present invention; 

FIG. 5 is a block diagram of a redundancy control system 
according to another embodiment of the present invention. 

FIG. 6 is a flow chart of a redundancy control method for 
initialization of ATM processor cards and ATM switching 
fabrics according to an embodiment of the present invention; 

FIG. 7 is a flow chart of a redundancy control method for 
ATM processor cards and ATM switching fabrics according 
to another embodiment of the present invention; 

DETAILED DESCRIPTION OF THE 
PREFERRED EMBODIMENTS 

The present invention will be better understood by refer- 
ence to the accompanying drawings. 

FIG. 1 depicts a network element 11 having a redundancy 
control system of an embodiment of the present invention. 
Network element 11 may be of the type discussed in 
co-pending application Ser. No. 09/324,721, entitled "Dial- 
able Data Services/TDM Bandwidth Management". 
Preferably, redundancy is provided at each level through 
which user traffic flows. 

To support operation in a redundant mode, user traffic 
entering network element 11 through line 60 is bridged by 
bridge 5 to redundant tributary cards 12 and 13. This 
bridging may be accomplished in several known ways that 
would permit operation of network element 11 in both a 
redundant mode and a non-redundant mode. One implemen- 
tation would include backplane access from the rear of 
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tributary cards 12 and 13 for operation in both modes. 
Another option would include rear access for redundant 
mode and front access for non-redundant mode. This 
approach might require that two separate types tributary 
cards be designed though. A third approach could include a $ 
backplane that does not support redundant mode but instead 
utilizes a special designed Y-cable for providing bridging. 
Other specific implementations may exist as well. Tributary 
cards 12 and 13 may be LAN cards, frame relay cards, POTs 
cards or any other type of tributary or line card. JQ 

When network element 11 is operating in a redundant 
mode, one of tributary cards 12 and 13 is designated to be 
working (tributary card 12, for instance) and the other is 
designated to be redundant (tributary card 13, for instance). 
Preferably, tributary cards 12 and 13 are located adjacent to 
one another to minimize the distance between the cards and 
thereby minimize the time required for a switch-over when 
working tributary card 12 experiences problems. 

STS switching fabrics 21 and 22 both receive processed 
traffic from tributary cards 12 and 13 and are capable of 2Q 
switching STS-n level signals. In a redundant mode, one of 
STS switching fabrics 21 and 22 is designated working (STS 
switching fabric 21 for instance) and the other is designated 
redundant (STS switching fabric 22 for instance). Although 
STS switching fabrics 21 and 22 receive processed traffic 25 
from both tributary cards 12 and 13, they only select traffic 
from the working tributary card (in this case, tributary card 
12) for further transmission. Similarly, in the other direction, 
traffic from both STS switching fabrics 21 and 22 is bridged 
to both tributary cards 12 and 13, while only working 3Q 
tributary card 12 forwards traffic to line 60. 

Also provided in network element 11 are VT switching 
fabrics 31 and 32, one of VT switching fabrics 31 and 32 
being designated as working (VT switching fabric 31 for 
instance) and one being designated as redundant (VT 35 
switching fabric 32 for instance). VT switching fabrics 31 
and 32 are capable of switching virtual tributary (VT-n) 
signals. ATM switching fabrics 41 and 42 are also provided, 
one of ATM switching fabrics 41 and 42 being designated as 
working (ATM switching fabric 41 for instance) and one 40 
being designated as redundant (ATM switching fabric 42 for 
instance). ATM switching fabrics 41 and 42 are capable of 
ATM cell switching. VT switching fabrics 31 and 32 receive 
traffic from STS switching fabrics 21 and 22 that has been 
designated as needing VT switching. Likewise, VT switch- 45 
ing fabrics 31 and 32 provide VT switched traffic to STS 
switching fabrics 21 and 22, ATM switching fabrics 41 and 
42 receive traffic from STS switching fabrics 21 and 22 that 
are in need of cell switching and provide cell switched traffic 
to STS switching fabrics 21 and 22. 50 

Aggregate card 51 receives traffic from STS switching 
fabrics 21 and 22. Aggregate card 51 may be an OC-n card, 
for example. Aggregate card 51 then processes only traffic 
from active STS switching fabric 21 for transmission out of 
network element 11 through line 61. Incoming traffic from 55 
line 61 is provided to both STS switching fabrics 21 and 22. 
It should be realized that a redundant aggregate card could 
be provided also. 

Operation of APS (Automatic Protection Switching) dis- 
tribution blocks, such as 6, 7, 24, 26, 28, 30, 17, 19 and 53, 60 
and APS selection blocks, such as 8, 9, 23, 25, 33, 34, 43, 
44, 45, 46, 35, 36, 27, 29, 16, 18 and 52, will be described 
by way of example in reference to FIG. 2. 

FIG. 2 shows the details of the redundancy control system 
of an embodiment of the present invention as it relates to 65 
traffic flowing between the tributary cards and the STS 
switching fabric. 



Traffic flowing to tributary cards 12 and 13 from STS 
switching fabrics 21 and 22 is bridged to both tributary cards 
12 and 13 by APS (Automatic Protection Switching) distri- 
bution blocks 24 and 26 in STS switching fabrics 21 and 22, 
respectively. This is accomplished through logic and/or 
software within APS distribution blocks 24 and 26. Design 
of such bridging functions would be within the capabilities 
of one skilled in the art. 

The STS switching fabrics 21 and 22 receive traffic from 
both tributary cards 12 and 13 through APS selectors 23 and 
25 respectively. APS selectors 23 and 25 select traffic 
received from only working tributary card 12 to pass on. 
This may be accomplished through logic and/or software 
within APS selectors 23 and 25. 

Tributary cards 12 and 13 should preferably be designed 
to detect hardware/software failures. Some methods of 
doing so would include designing parity checks on address 
and data buses, providing ASICs 2 and 3 with the capability 
to self check, or providing diagnostic software that periodi- 
cally runs diagnostics when ports are not actively transmit- 
ting or receiving traffic. Other methods may exist as well. 
Design of such features would be within the capabilities of 
one skilled in the art. 

The two tributary cards 12 and 13 should appear as one 
card to other telecommunications network elements. If tribu- 
tary cards 12 and 13 are LAN cards, for instance, they 
should have the same Media Access Controller (MAC) 
address. To achieve this, network element CPU 76 reads the 
MAC address from non-volatile RAM 18 in working tribu- 
tary card 12 and writes it to redundant tributary card 13 into 
non-volatile RAM 19. 

Preferably, tributary cards 12 and 13 both are active at the 
same time. That means both would actively process any 
traffic received from either direction. This will assist in 
minimizing the time it takes redundant tributary card 13 to 
become working in the event of a problem with working 
tributary card 12, since switch-over would basically amount 
to only flipping a switch in APS selectors 23 and 25 and 
relays 14 and 15 on the transmit path of tributary cards 12 
and 13 as discussed below with regard to FIG. 3. Although 
redundant tributary card 13 would be actively processing 
data, its data would be thrown away while it remained in the 
redundant mode at the APS selectors 23 and 25. 

Operation of relays 14 and 15 is now described. Tributary 
cards 12 and 13 have relays 14 and 15, respectively, in series 
with the path of traffic flowing to bridge 5 out to line 60. 
During operation of network element U, relay 14 of work- 
ing tributary card 12 will be closed, allowing traffic to flow 
to bridge 5, while relay 15 of redundant tributary card 13 
will be opened, prohibiting traffic from flowing to bridge 5. 
That way, only traffic from the working card is passed onto 
line 60. Should tributary card 12 experience problems and 
tributary card 13 become the working card, then relay 14 
will be opened and relay 15 will be closed so that only traffic 
from tributary card 13 would flow through bridge 5 to line 
60. 

APS selectors 8, 9, 33, 34, 35, 36, 43, 44, 45, 46, 27, 29, 
16, 18 and 52 shown in FIG. 1, perform the same function 
for the signals provided to them as do APS selectors 23 and 
25 described above. APS distributors 6, 7, 28, 30, 17, 19 and 
53, shown in FIG. 1, perform the same function for the 
signals provided to them as do APS distributors 24 and 26 
described above. Hiey may be implemented in the same 
fashion or in a different fashion by one skilled in the art. For 
simplicity purposes, separate description of their operation 
will not be provided. 
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FIG. 3 depicts the process undertaken by network element 

11 in the redundancy control method according to an 
embodiment of the present invention. In this embodiment, 
tributary cards 12 and 13 are LAN cards and are provision- 
able by a network operator (not shown) to act in a non- 5 
redundant mode or a redundant mode. 

In step 100, a network operator provisions tributary cards 

12 and 13 for a redundancy mode. Once the network 
operator has selected tributary cards 12 and 13 to operate in 

a redundancy mode, the network element CPU 76 reads the 10 
MAC address of working tributary card 12 and writes it to 
redundant tributary card 13 in step 105. Preferably, the MAC 
address is written into non-volatile RAM. In step 110, 
network element CPU 76 then notifies tributary card 13 that 
is a redundant and opens relay 15 on tributary card 13. In ^ 
step 115, when working tributary card 12 has detected the 
presence of a failure on itself that necessitates a switch-over 
to redundant tributary card 13, it informs APS Hub 71 of the 
unit failure on serial point-to-point overhead link 85 and 
opens relay 14 in its transmit path to line 60 so as to cease 2 o 
transmitting to line 60. APS Hub 71 then switches APS 
selectors 23 and 25 in STS switching fabrics 21 and 22, 
respectively, so the traffic to be processed by STS switching 
fabrics 21 and 22 will now be from tributary card 13 and 
informs tributary card 13 through parallel bus 81 that it is 25 
now the working card in step 120. In step 125, relay 15 in 
new working card 13 then closes to allow traffic to be 
transmitted through bridge 5 onto line 60. 

As discussed above, STS switching fabrics 21 and 22 and 
VT switching fabrics 31 and 32 are set up in a redundancy 30 
mode. FIG. 4 shows a criteria for switch-over between 
working STS switching fabric 21 and redundant STS switch- 
ing fabric 22 and between working VT switching fabric 31 
and redundant VT switching fabric 32 according to an 
embodiment of the present invention. This may be imple- 35 
mented in software in network element 11. In step 200, both 
working switching fabric and redundant switching fabric are 
monitored for frame errors. This monitoring can be done in 
much the same fashion as with tributary cards 12 and 13 
described above. In step 205, a decision is made as to 40 
whether or not there have been a predetermined number of 
consecutively errored frames in the working switching fab- 
ric. The predetermined number could be any integer, such as 
three. Alternatively, the system could be set up so that it 
looks for a predetermined percentage of errored frames after 45 
detecting a first errored frame or a predetermined number of 
errored frames within a preset time. 

If the predetermined number of consecutive errored 
frames has not been reached, step 200 is repeated. If the 
predetermined number of consecutively errored frames has 50 
been reached, working switching fabric notifies APS Hub 71 
through serial point-to-point overhead link 85 in step 207. 
APS Hub 71 then checks with the redundant switching 
fabric through serial point-to-point overhead link 85 to 
determine whether the redundant switching fabric is expe- 55 
riencing frame errors in step 210. The same or different 
method and criteria can be applied to determine if the 
redundant switching fabric is experiencing frame errors. If it 
is, step 200 is repeated. If it is not, a switch-over is initiated 
in step 215. In the case that STS switching fabrics 21 and 22 60 
are being switched, APS Hub 71 switches APS selectors 8 
and 9 in tributary cards 12 and 13, respectively, so that the 
traffic to be processed by tributary cards 12 and 13 from will 
now be from STS switching fabric 22 and informs STS 
switching fabric 22 through parallel bus 81 that it is now the 65 
working switching fabric. In the case that VT switching 
fabrics 31 and 32 are being switched, APS Hub 71 switches 



APS distributors 24 and 26 in STS switching fabric 21 and 
22, respectively, so the traffic passed on by STS switching 
fabrics 21 and 22 will now be from VT switching fabric 22 
and informs VT switching fabric 22 through parallel bus 81 
that it is now the working switching fabric. Preferably, a 
switch-over will not be immediately reversible. This will 
prevent bouncing between the two fabrics when noisy traffic 
conditions exist. 

Redundancy control for the ATM switching fabrics may 
be handled as shown in FIG. 5. As shown in FIG. 5, network 
element 11 contains ATM switching fabrics 41 and 42 and 
ATM processor cards 45 and 46. The ATM processors found 
on ATM processor cards 45 and 46 could alternatively reside 
on the same card as the ATM switching fabrics 41 and 42 
respectively. For purposes of redundancy control, under an 
embodiment of the present invention, ATM switching fabric 
41 and ATM processor card 45 are handled as a single unit 
in terms of redundant switching protection. The same is true 
for ATM switching fabric 42 and ATM processor card 46. 

Each ATM processor card 45 and 46 has a dedicated 
connection 65a and 65b, respectively, to its respective ATM 
switching fabric card's CPU for sending and receiving 
signaling and messages, such as PNNI and ILMI messages. 
Such a connection is preferably through a AAL5 SAR 
device (not shown). Each ATM processor card 45 and 46 is 
also connected to its respective ATM switching fabric card 
41 and 42 through a respective control bus 66a and 66b. 
These control busses 66a and 66b are used to provide access 
to ATM switching fabric registers (not shown) and for 
receiving interrupts from ATM switching fabrics 41 and 42. 
Software on ATM processor cards 45 and 46 uses a safe read 
and safe write function to read and write to ATM switching 
fabric registers. Each ATM processor card 45 and 46 is 
connected to network element CPU 76 via a TCP/IP con- 
nection over HDLC link 91. This connection permits the 
downloading of provisioned ATM databases to the ATM 
processor cards 45 and 46. Programing of connection tables 
in the switching fabric can be done by ATM processor cards 
45 and 46 either through inband control cells through 
dedicated connections 65a and 65b CPU port or through 
commands through control busses 66a and 66b, respectively. 

Two sets of parallel bus registers 77a and 77 b to which the 
ATM processor cards 45 and 46 and APS Hub 71 write to 
and read from exist — one for each set of ATM processor 
cards/ATM switching fabric cards. Sets of registers 77a and 
77£> each include an ATM processor card present, ATM 
switching fabric card present, activity request to ATM pro- 
cessor card, and ATM processor card status register. 

ATM processor cards 45 and 46 and network element 
CPU 76 are connected by HDLC link 91. ATM processor 
card kernel software provides a pNA software layer on top 
of HDLC link 91 for TCP/IP stack functionality. 

FIGS. 6 and 7 depict a redundancy control method 
according to an embodiment of the present invention for 
handling ATM switching fabrics and ATM processor cards. 

In FIG. 6, the initialization sequence upon booting up 
according to an embodiment of the present invention is 
shown. In step 300, APS Hub 71 decides which of ATM 
processor cards 45 and 46 will be working and updates 
registers 77a and lib via parallel bus 81. When registers 77a 
and lib are updated by the APS Hub 71, the respective ATM 
processor cards 45 and 46 will get an interrupt over parallel 
bus 81 and read their respective registers 77a and 776. In 
step 310, ATM processor cards 45 and 46 then inform APS 
Hub 71 of their state by updating their respective status 
registers within registers 77a and lib. APS Hub 71 checks 
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the status of the status registers within 77a and 776 to ensure 
ATM processor cards 45 and 46 have accepted their assign- 
ments. States that can be stored in status registers within 77a 
and lib include both nonfunctional and functional states. 
Functional states include redundant, working and in a down- $ 
load. The nonfunctional states include diagnostics, ATM 
switching fabric diagnostics, booting and reset. The APS 
Hub 71 can initiate interrupts due to manual switching, 
initial provision or fault detection. 

In step 320, ATM processor cards 45 and 46 initiate 10 
TCP/IP connections to network element CPU's 75 IP 
address over HDLC link 91 through known socket ports. 
There are separate known socket ports (not shown) for the 
working and redundant state of the ATM processor cards. 
Network element CPU's 75 server software listens to these 1S 
two socket ports. The working ATM processor card 45 
connects to the active socket port and redundant ATM 
processor card 46 connects to the inactive socket port. In 
step 330, upon the connection, the ATM processor cards 45 
and 46 send a database download request message to net- 2 q 
work element CPU 75. This message preferably includes the 
ATM processor card's software version, activity state, data- 
base version, the latest IPP transaction ID and time. In step 
340, it is determined if a database or a software download is 
needed. If so, in step 350 it is checked to determine if the 25 
card needing the download is a redundant. If the card is a 
redundant, the download occurs in step 360. If not, in step 
370, the APS Hub can be notified. When the software 
download is completed, in step 380, the ATM processor card 
45 or 46 informs network element CPU 75 whether or not 30 
the download was successful and then restarts itself. 

When IPP messages are needed to be sent by network 
element CPU to ATM processor cards 45 and 46, they are 
sent first to working ATM processor card 45. Once working 
ATM processor card 45 returns a success response, the 35 
message is forwarded to redundant ATM processor card 46 
by network element CPU 75. It is not necessary that the 
redundant ATM processor card 46 receive IPP messages 
from network element CPU 75. Instead, the working ATM 
processor card 45 can be responsible for sending IPP mes- 40 
sages to the redundant ATM processor card 46. However, 
this would require additional software in the working ATM 
processor card 45 to recreate IPP messages from its database 
and send them to the redundant ATM processor card 46 
when a new redundant ATM processor card 46 is inserted. 45 

FIG. 7 shows redundancy control method according to an 
embodiment of the present invention for handling ATM 
switching fabrics and ATM processor cards when faults are 
detected. 

Each ATM processor card 45 and 46 detect faults when 50 
they occur, such as LCD alarms. In step 400 such a fault is 
detected. Upon detection of an alarm, ATM processor cards 
45 and 46 report the alarm to APS Hub 71 in step 405. When 
APS Hub 71 receives a fault interrupt from AIM processor 
card 45 or 46, it realizes there is an ATM processor card 55 
failure or an ATM switching fabric failure. In step 410, APS 
Hub 71 retrieves the alarms from the working ATM proces- 
sor card's 45 parallel bus registers 11a. Preferably, VP 
protection is performed in both ATM processor cards 45 and 
46. The reason for the fault can be a stored in parallel bus 60 
register 77a or lib or, alternatively, software residing on the 
ATM processor card could issue an interrupt with the reason 
for the fault. A number of faults can be used including: 
software watch dog timeout; card pullout; power-up restart; 
front panel reset; ATM processor card memory bus error; 65 
illegal instruction; PCI bus error; Utopia parity error; ATM 
switching fabric memory parity error, ATM switching fabric 
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memory bus error; software bus error; ATM processor card 
insert; ATM processor card pull-out; ATM switching fabric 
insert; and ATM switching fabric pull-out. 

In step 415, a APS Hub 71 initiates a switch-over. When 
a switch-over occurs, in step 420, each of ATM processor 
cards 45 and 46 shuts down the TCP/IP connection and 
reconnects with reversed socket ports so that the new 
working ATM processor card 46 is now connected to the 
working socket port and the new redundant ATM processor 
card 45 is connected to the redundant socket port. The ATM 
processor cards 45 and 46 will also each shut down its 
connection if a reset/fault trigger causes the transition to a 
nonfunctional state. 

When redundant ATM processor card 46 goes from the 
redundant state to the working state in step 425, it enables 
the SAR signaling AAL5 connections. Restart messages are 
sent to all the UNI/NNI interfaces requesting the peers to 
restart all the active UNI/NNI calls. The SVC entries in the 
database and in the ATM switching fabric are then cleared 
before accepting any new calls. 

In ATM communications, duplicate cells cannot be trans- 
mitted by a switch and cell ordering must be maintained. In 
order to achieve this, the redundant ATM processor card 46 
will disable its switch ports for both receiving and trans- 
mitting. This way, no cells can be queued in. Thus in step 
430, when the redundant ATM processor card 46 becomes 
working, it enables the switch ports and when the working 
ATM processor card 45 becomes redundant, it flushes its 
buffers and disables its switch ports. 

Although the preferred embodiments of the present inven- 
tion have been described and illustrated in detail, it will be 
evident to those skilled in the art that various modifications 
and changes may be made thereto without departing from 
the spirit and scope of the invention as set forth in the 
appended claims and equivalents thereof. 

We claim: 

1. A redundancy control system comprising: 
a plurality of tributary cards, each of said cards being 
outfitted so as to detect failures and one of said plurality 
of tributary cards being a working tributary card and 
another of said plurality of tributary cards being a 
redundant tributary card; 
a bridge, said bridge being outfitted so as to provide 
identical traffic to said working and redundant tributary 
cards; 

a working STS switching fabric, said working STS 
switching fabric receiving data frames from said work- 
ing and redundant tributary cards, said working STS 
switching fabric comprising a first selector, said first 
selector being outfitted so as to select received traffic 
from one of said working and redundant tributary cards 
to process; 

a redundant STS switching fabric, said redundant STS 
switching fabric also receiving said data frames from 
said card, said redundant STS switching fabric com- 
prising a second selector, said second selector being 
outfitted so as to select received traffic from one of said 
working and redundant tributary cards to process; 

a plurality of ATM switching fabric cards, said plurality of 
ATM switching fabric cards receiving data frames from 
said working and redundant STS switching fabrics; 

a plurality of ATM processor cards, one of said ATM 
switching fabric cards and one of said ATM processor 
cards being grouped to form a first redundancy group 
and another of said ATM switching fabric cards and 
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another of said ATM processor cards being grouped to 
form a second redundancy group; and 
an APS hub, said APS hub being outfitted so as to become 
aware of detected failures on said plurality of tributary 
cards and switch said selector so as to select received S 
data frames from said redundant tributary card upon 
becoming aware of a detected failure on said working 
tributary card, said APS hub further being outfitted so 
as to select one of said first redundancy group and said 
second redundancy group to be working and another of 30 
said first redundancy group and said second redun- 
dancy group to be redundant. 

2. A method of redundancy control, comprising the steps 
of: 

provisioning a first and a second card so that one of said 15 
first and second cards is a working card and one is a 
redundant card; 

reading a MAC address from said first card; 

writing said MAC address to said second card; 2Q 

opening a relay on said redundant card at or about a time 
of said writing said MAC address step; 

receiving data from said working card; 

detecting a failure on said working card; and 

after detecting said failure, switching packet data 25 
received, so that said packet data received is received 
from said redundant card rather than from said working 
card. 

3. A method as in claim 2, wherein said writing said MAC 
address step comprises writing said MAC address to non- 30 
volatile RAM. 

4. A method as in claim 2, further comprising the steps of 
informing said redundant card that it is now a working card, 
and closing said relay. 

5. A method of redundancy control, the method compris- 35 
ing the steps of: 

provisioning a first and a second card so that one of said 
first and second cards is a working card and one is a 
redundant card; 

reading a MAC address from said first card; 40 

writing said MAC address to said second card; 

receiving data from said working card; 

detecting a failure on said working card; 

after detecting said failure, switching packet data 45 
received, so that said packet data received is received 
from said redundant card rather than from said working 
card; and 

opening a relay on said working card at or about a time of 
said detecting a failure step. so 

6. The method of claim 5, wherein said writing said MAC 
address step comprises writing said MAC address to non- 
volatile RAM. 

7. The method of claim 5, further comprising the step of 
opening a relay on said redundant card at or about a time of ss 
said writing said MAC address step. 

8. The method of claim 7, further comprising the steps of 
informing said redundant card that it is now a working card 
and closing said relay. 

9. The method of claim 5, wherein both a working and a 60 
redundant STS switching fabric receive said data from said 
working card. 

10. A method of redundancy control, the method com- 
prising the steps of: 

provisioning a first and a second card so that one of said 65 
first and second cards is a working card and one is a 
redundant card; 
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reading a MAC address from said first card; 

writing said MAC address to said second card; 

receiving data from said working card, wherein both a 
working and a redundant STS switching fabric receive 
said data from said working card; 

detecting a failure on said working card; and 
after detecting said failure, switching packet data received, 
so that said packet data received is received from said 
redundant card rather than from said working card. 

U. The method of claim 10, wherein said writing said 
MAC address step comprises writing said MAC address to 
non- volatile RAM. 

12. The method of claim 10, further comprising the step 
of opening a relay on said redundant card at or about a time 
of said writing said MAC address step. 

13. The method of claim 12, further comprising the steps 
of informing said redundant card that it is now a working 
card and closing said relay. 

14. The method of claim 10, further comprising the steps 
of opening a relay on said working card at or about a time 
of said detecting a failure step. 

15. A redundancy control system, comprising: 
a card; 

a working STS switching fabric, said working STS 
switching fabric receiving traffic frames from said card; 

a redundant STS switching fabric, said redundant STS 
switching fabric also receiving said traffic frames from 
said card; 

wherein after processing a predetermined number of 
consecutive traffic frames containing detected errors, 
said redundant STS switching fabric and said working 
STS switching fabric are switched over, so that said 
working STS switching fabric becomes redundant and 
said redundant STS switching fabric becomes working, 
wherein said switch-over is not immediately reversible. 

16. A redundancy control system as in claim 15, wherein 
said switch-over will not occur if errors in frames processed 
by said redundant STS switching fabric are also detected. 

17. A redundancy control system comprising: 
a plurality of ATM switching fabric cards; 

a plurality of ATM processor cards, one of said ATM 
switching fabric cards and one of said ATM processor 
cards being grouped to form a first redundancy group 
and another of said ATM switching fabric cards and 
another of said ATM processor cards being grouped to 
form a second redundancy group; and 

an APS hub; 

wherein, one of said first redundancy group and said 
second redundancy group is working and another of 
said first redundancy group and said second redun- 
dancy group is redundant and wherein said APS hub 
selects which redundancy group is working. 

18. A redundancy control system as claimed in claim 17, 
further comprising a bus, said bus being coupled to said APS 
hub and said first and second redundancy groups, wherein 
said APS hub selects which redundancy group is working 
via sending a request over said bus. 

19. A redundancy control system as claimed in claim 18, 
wherein said bus is coupled to said first and second redun- 
dancy groups via said one of said ATM processor cards and 
said another of said ATM processor cards, respectively. 

20. A redundancy control system as claimed in claim 18, 
wherein said ATM processor cards each convey a state to 
said APS hub via said bus. 

21. A redundancy control system as claimed in claim 20, 
further comprising a plurality of sets of registers. 
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22. A redundancy control system as claimed in claim 21, 
further comprising a bus ASIC, said bus ASIC being out- 
fitted so as to generate an interrupt to software on said ATM 
processor cards upon an update to a register within said 
plurality of sets of registers. 

23. A redundancy control system as claimed in claim 22, 
wherein each of said sets of registers stores data indicative 
of whether an ATM processing card is present in a particular 
slot. 

24. A redundancy control system as claimed in claim 22, 
wherein each of said sets of registers stores data indicative 
of whether an ATM switching fabric is present in a particular 
slot. 

25. A redundancy control system as claimed in claim 22, 
wherein each of said sets of registers is associated with one 
of said redundancy groups and stores data indicative of a 
request by said APS hub for a respective redundancy group 
to be working or redundant. 

26. A redundancy control system as claimed in claim 22, 
wherein each of said sets of registers stores data indicative 
of a status of an associated AIM processing card. 

27. A redundancy control system as claimed in claim 18, 
further comprising a fault register containing an indication 
of a type of fault found in one of said redundancy groups. 

28. A redundancy control system as claimed in claim 17, 
wherein each of said first and second redundancy groups 
further comprises a control bus connecting said redundancy 
groups' respective ATM processing card to said redundancy 
groups' respective ATM switching fabric, said control bus 
permitting said respective ATM processing card to receive 
interrupts from said respective ATM switching fabric. 

29. A redundancy control system as claimed in claim 17, 
further comprising a link and a network element CPU, said 
link connecting said plurality of ATM processor cards to said 
network element CPU such that said plurality of ATM 
processor cards are capable of downloading an ATM data- 
base over said link from said network element CPU. 

30. A redundancy control system as claimed in claim 29, 
wherein said link is an HDLC link. 

31. A redundancy control system as claimed in claim 17, 
wherein said ATM processor cards are capable of detecting 
faults within themselves and said ATM switching fabrics. 

32. A redundancy control system as claimed in claim 17, 
further comprising two interrupt lines, one of said interrupt 
lines connecting said first redundancy group to said APS hub 
and another of said interrupt lines connecting, said second 
redundancy group to said APS hub, said two interrupt lines 
being outfitted so as to convey interrupts to said APS hub. 

33. A redundancy control system as claimed in claim 32, 
wherein said interrupts include a software watchdog inter- 
rupt. 

34. A redundancy control system as claimed in claim 32, 
wherein said interrupts include a card pull out interrupt. 

35. A redundancy control system as claimed in claim 32, 
wherein said interrupts include a power up reset interrupt. 

36. A redundancy control system as claimed in claim 32, 
wherein said interrupts include a front panel reset interrupt. 

37. A redundancy control system as claimed in claim 32, 
wherein said interrupts include a ATM processor card 
memory bus error interrupt. 
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38. A redundancy control system as claimed in claim 32, 
wherein said interrupts include an illegal instruction inter- 
rupt. 

39. A redundancy control system as claimed in claim 32, 
wherein said interrupts include a PCI bus interrupt. 

40. A redundancy control system as claimed in claim 32, 
wherein said interrupts include a Utopia parity error inter- 
rupt. 

41. A redundancy control system as claimed in claim 32, 
wherein said interrupts include a switching fabric memory 
parity error interrupt. 

42. A redundancy control system as claimed in claim 32, 
wherein said interrupts include a switching fabric memory 
bus error interrupt. 

43. A redundancy control system as claimed in claim 32, 
wherein said interrupts include a software bus error inter- 
rupt. 

44. A redundancy control system as claimed in claim 32, 
wherein said interrupts include an ATM processor card insert 
interrupt. 

45. A redundancy control system as claimed in claim 32, 
wherein said interrupts include an ATM processor card 
pull-out interrupt. 

46. A redundancy control system as claimed in claim 32, 
wherein said interrupts include an ATM switching fabric 
insert interrupt. 

47. A redundancy control system as claimed in claim 32, 
wherein said interrupts include an ATM switching fabric 
pull-out interrupt. 

48. A method of redundancy control comprising: 
monitoring a working and redundant ATM processor and 

ATM switching fabric for faults; 
upon detection of a fault, switching-over said working 
and redundant ATM processor and ATM switching 
fabric so that said working ATM processor and ATM 
switching fabric become a new redundant ATM pro- 
cessor and ATM switching fabric and said redundant 
ATM processor and ATM switching fabric become a 
new working ATM processor and ATM switching 
fabric, 

wherein said working and redundant ATM processors 
disconnect TCP/IP connections to a CPU and reverse 
their connections, so that said working ATM processor 
is now connected to a redundant connection and said 
redundant ATM processor is now connected to a work- 
ing connection. 

49. A method of redundancy control as claimed in claim 
so 48, further comprising the step of said redundant ATM 

processor restarting UNI/NNI calls and clearing SVC entries 
upon being switched-over. 

50. A method of redundancy control as claimed in claim 
49, further comprising the steps of said new working ATM 
processor enabling switch ports on said new working ATM 
switching fabric and said new redundant ATM processor 
disabling switch ports on said new redundant ATM switch- 
ing fabric. 
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